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(54)Tltie: VIDEO MEDIA SECURITY AND TRACKING SYSTEM 



(57) Abstract 

A system for providing secmity and tracking data for rental video media, including digital video discs and digital video cassettes. 
Those new formats for video players and media allow for inclusion of security features which both allow tracking of rental of such media 
and prevent unauthorized rental thereof. Each player includes a decision circuit which plays a particular disc (or tape) only if a player 
identification number recorded on a special separate authorization memoiy card is the same as the player identification stored in the player, 
and if a movie identification number optically read from the disc matches a movie identification number recorded on the special card. A 
corresponding apparatus is provided at the video rental store which, at the time of rental, records on the authorization card in encrypted 
forai die movie identification number and the number of the particular disc player for which that rental is intended. The encryption uses 
the private key of a public key system, the public key and the modulus being pre-recorded on the optical portion of the disc. 
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VIDEO MEDIA SECURITY AJ^D TRACKING ST^TtM 

John 0. Ryan 
E. Frasier Morrison 
Gregory c. Copeland 

BACKGRO UND OF THE INVEWTTOM 
Field of t he Invent- ir>n 

This invention relates to security systems for 
video media and more particularly to a system for 
allowing an owner of copyrighted video material to 
control,. on a per use basis, viewing of that material 
provided on a prerecorded medium such as a video disc 
or video tape cassette. 

Descrip tion of the Prior An- 

As is well known, typically video tape cassettes 
or video discs containing prerecorded material such as 
movies are commercialized as follows- The owner of the 
copyrighted material on the video cassette or disc, 
20 i.e. the movie studio ("rights owner"), arranges for 
duplication of the movie onto a large number of video 
tape cassettes or discs. The video tape cassettes and 
discs are then sold by the movie, studio to owners of 
video rental stores who then rent each video tape 
cassette or disc out as many times as they can, 
depending on demand. However, the owner of the video 
rental store only pays for each video tape cassette or 
disc once, because he has purchased it outright from 
the movie studio. Thus the bulk of the profits due to 
rental of such material accrue to the video rental 
store owner rather than to the movie studio. This is 
because the so-called "first sale doctrine" prevents 
the seller (the movie studio) of the video tape 
cassettes or discs from exercising any degree of 
control over the downstream commercialization (e.g.. 
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rental) of its products. This is the case even though 
the video material is copyrighted. 

It has been frustrating to the rights owners 
(movie studios, etc.) that they are not able to better 
5 control and/or profit from the rental market for their 
movies and other program material. Various methods 
have been proposed to allow the rights owners to 
overcome the first sale doctrine and acquire some 
degree of control over the rental of, for instance, VHS 
10 video tape cassettes. 

One proposed method uses a "non-rewindable" 
cassette. Once played by the consumer (renter) , the 
cassette must be returned to the rental store for 
rewinding. The rewinding machine is such that it 
15 automatically records each rewinding transaction and 
the movie studio (or its agent) can then periodically 
check the rewinding machine, either on the spot or by 
telecommunications, for a transaction-by-transaction 
record. This of course requires some business 
20 arrangement between the video store owner and the movie 
studio to pay for the video cassette on a per use 
basis. Such arrangements are contractual matters 
outside of the purviev of this patent disclosure. 
The non-rewindable cassette has the obvious 
25 disadvantage that each renter may watch each movie only 
once per rental. This is frustrating to the renter who 
may wish to watch the movie more than once. There is 
also obviously a temptation on the part of the video 
store owner to tamper with the rewinding machine and 
30 hence end up paying fewer for rentals of the cassette 
than he is obligated to pay for. 

A second proposal now being tested involves 
installing a special integrated circuit in each 
individual video tape cassette. This circuit turns 
55 itself on a predetermined time after being armed and 
radiates an interfering radio signal to the VCR 
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electronics, thus effectively prohibiting further 
playing of that video tape cassette until it is 
•returned to the rental store for reprograinming of the 
circuit. Again, the reprograinming machine 
automatically records the reprograinming transaction. 
So far this proposal has limited support due to the 
cost of the circuit in the video tape cassette, 
possible consumer inconvenience if the circuit 
malfunctions, and the ease with which it could be 
cheated by the video store operator or so-called 
"hackers-v (The term "hacker" herein refers to anyone 
attempting to defeat system security by technical 
means.) The same deficiencies apply to the non- 
rewindable cassette approach. The circuit inside the 
video cassette also requires provision of a battery to 
power such a circuit, with the attendant practical . 
complications . 

Other proposals involve mechanical or electronic 
counters installed in each video tape cassette to count 
20 the number of plays. Again, this is problematic if a 
particular renter might want to play the video tape 
cassette more than once, and also is easily overcome by 
tampering. 

It is to be understood that the video store owners 
interests in this regard are to a large extent the same 
as those of the rights owners. If a reliable system 
could be found to share rental revenues between the 
rights owners and the video store owners, then the 
rights owners would provide many more copies of each 
movie for rental to each store, hence increasing 
profits for both parties. 

None of the above security systems are feasible 
for use with, for instance, video discs, which are soon 
expected to become very popular in new digital formats. 
Additionally, it is to be understood that the 
deficiencies of the above systems are a consequence of 
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constraints imposed by the requirement that any such 
security system must be compatible with the large 
installed base of VCRs. Thus the proposed solutions to 
this problem are essentially unsatisfactory and none 
have been widely implemented. 

SUMMARY 

The present inventors have recognized that it is 
advantageous if a security system, instead of being 
forced to operate with the constraints of the present 
installed base of VCRs, instead uses a player 
compatible with new recording media specif ication(s) 
and includes a dedicated low cost rental control 
subsystem. Such a security system is especially 
15 suitable in anticipation of the introduction of new 

formats for video media such as the Digital Video Disc 
(DVD) and the Digital Video Cassette (DVC) . 

Implementation of the present security system 
requires that a significant proportion of the rights 
owners agree on the desirability of being able to 
better control commercial use of their copyrighted 
materials for the new formats, and as a consequence 
that the manufacturers of the players would be 
receptive to making compatible players in the 
25 expectation of increased support for their formats. 

In accordance with the present invention T the 
present inventors have identified several important 
security system attributes, one is functionality, that 
the system track and report each rental transaction 
30 both by program (movie) title and length of time (days 
or hours) rented out. Further, the system should be 
capable of segregating transactions by, for instance, 
movie studio, and downloading this information on a 
periodic basis by e.g. the telephone lines to a 
35 transaction service center or to particular copyright 
owners . 
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The next attribute is a high level of system 
security; the present system is believed to be 
impossible (or prohibitively expensive on a practical 
basis) for unscrupulous video rental store owners (or 
hackers in collusion with video rental store owners) to 
cheat on or to compromise. Thus in accordance with the 
invention the rights owners can be confident that they 
are properly recompensed for rental activity, in the 
event of any security breach, in accordance with the 
invention it is possible quickly and inexpensively to 
recover from the breach and minimize resulting losses. 
Also, in accordance with the invention, there is 
tracking system security, in that particular rights 
owners are assured that transaction data relating to 
their particular video material (movie titles) is not 
accessible by others. 

Another attribute is that the present system is 
operationally simple, providing minimum operational 
burden to the employees of the video rental store. 
Similarly, the users (renters) enjoy operational 
simplicity so that the system is essentially 
transparent to the renter of the video material and 
does not interfere with his enjoyment of the rented 
material. 

As a last attribute, the present system adds 
minimal cost both to the players and the mediaV in 
addition, the cost of the in-store transaction 
monitoring and reporting equipment is believed to be 
quickly recoverable. 

One embodiment in accordance with the present 
invention is directed to the digital video disc format 
medium. However, it is to be appreciated that the 
present invention is also applicable to systems using 
analog or digital video cassette tapes or analog video 
discs or other media using magnetic, optical or 
magneto-optical or other types of recording. This 
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system is also applicable to other than video material 
such as audio material. (However, generally audio 
media are sold outright and not rented.) 

Moreover, while one embodiment disclosed herein 
involves digital video disc media, it is to be 
understood that the invention is not particular to 
digital material but is also applicable to analog 
recordings. 

In accordance with the invention there is a "TTRD" 
(transaction tracking and reporting device) which is an 
apparatus for use in a video store, and a method of 
using the TTRD to record, on a separate authorization 
card, in encrypted form of a program (movie) 
identification for the material prerecorded on the disc 
or tape and also in encrypted form the identification 
of a particular player. The authorization card is a 
reusable memory card having a capacity of about loo 
bytes and being semiconductor, magnetic, or other 
suitable memory technology. 

In addition, in accordance with the invention 
there is provided a modified player (a DVD player or 
video cassette tape player) which in addition to the 
conventional circuitry includes dedicated rental 
control circuitry and/or software for reading, from the 
prerecorded material on the medium, rent /sell 
authorization data, a public decryption key, and the 
program identification. Also provided in the player is 
a slot to accept the authorization card for reading the 
authorization card and connecting via a data decoder 
and error correction circuitry to a decryptor. The 
decryptor also receives the public decryption key which 
was optically recorded on the disc, and thereby 
decrypts from the data on the authorization card the 
program identification and the player identification. 
A special decision circuit in each player compares the 
player identification from the authorization card to 
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that stored in a read only memory in the player, and 
also compares the program ID from the decryptor to the 
program ID provided from the prerecorded material, 
only if both the two player identifications are 
5 authenticated (match) and the two program 

identifications are authenticated (match) , is the 
player enabled to play the prerecorded material. 

Of course if authorization data indicating that 
this is a sell-through (non-rental) disc is present on 
10 the disc, i.e. there is a authorization indication to 
play, then even if no program or player identification 
matches are made, the player is enabled to play the 
prerecorded program material. 

Also therefore in accordance with the invention is 
a method of operating the player to authorize its 
operation to play the prerecorded material. 

In an alternative embodiment, the authorization 
card is not used and instead a writable (e.g. magnetic) 
memory is located on the disc itself, by providing a 
narrow circular magnetic track near the center of the 
disc, to be read by a special magnetic head in each DVD 
player. 

The last element is the prerecorded media. In the 
case Of the DVD disc, this is a video disc including 
(in the alternative embodiment) the magnetic track 
located at a convenient location, such as near the disc 
center. The magnetic track on the disc as it comes 
from the factory and is shipped to the video rental 
store is typically blank but has space sufficient to 
record on it the encrypted program identification and 
encrypted player identification. 

It is to be understood that hereinafter when 
reference is made to the authorization card, in the 
alternative embodiment this refers to the magnetic 
track on the disc or an equivalent for a video tape 
cassette. 
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In the case of a video tape cassette suitable for 
use in accordance with the present invention, recorded 
on the video tape at a convenient location (s) is the 
data decryption key and the program identification. 
5 Recorded at another location only in the alternative 
embodiment (for convenience of reading by the TTRD 
without rewinding of the video tape itself) is a second 
separate magnetic track which is sufficient size to 
include space for recordation of the encrypted program 
10 identification and encrypted player identification. 
The location of the second magnetic track may be for 
instance on the outside of the cassette housing. Thus 
when the video tape cassette is inserted into the TTRD 
(or the VCR), the insertion and corresponding movement 
of the cassette into the TTRD (or VCR) passes this 
track past a fixed magnetic head and hence allows easy 
reading thereof, m another version of the alternative 
embodiment, the second magnetic track is located on the 
end of one of the video tape cassette spindles, and 
hence the spinning of these spindles moves the magnetic 
track past a suitably located small magnetic head, in 
either case, there is no need to search for the 
encrypted data on the video tape itself. 

25 BRIEF DR. SCRTPTTOM QF THF HRAWINGS 

Figure l shows a transaction tracking and ' 
recording device in accordance with the present 
invention. 

Figure 2 shows a player in accordance with the 
30 present invention. 

Figure 3 shows a video disc in accordance with an 
alternative embodiment of the present invention. 

Figure 4 shows a video cassette tape in accordance 
with the alternative embodiment of the present 
35 invention. 
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DETAILED DESCRTP TIQN OF THE PRFFFPPED EMBODIMENTfi 

In a Digital Video Disc (DVD) embodiment, each DVD 
player, which is otherwise of a conventional type 
recently announced, for instance, by Toshiba or Sony or 
any other type, includes embedded in an internal memory 
a stored identification. This identification (e.g. , a 
number) need not necessarily be the same as the player 
serial number. This identification is e.g., at least 6 
or 8 decimal digits for best security. The player 
identification may have significantly fewer digits than 
the player serial number, for instance, having as 
little as two decimal digits at a penalty of reduced 
security. Thus the player identification need not be 
unique to each digital video player, but is a number 
large enough so it is not likely to be easily 
duplicated amongst the number of individual DVD players 
which a hacker may encounter. 

Each corresponding digital video disc intended for 
the rental market includes, in addition to the normal 
optical prerecorded track in the alternative embodiment 
only, an additional narrow circular magnetic recording 
track located for instance near the center of the disc 
(this location is illustrative and not limiting) . This 
track need hold approximately only lOO bytes of data. 
The magnetic track is read by a magnetic read head 
provided in each DVD player in accordance with" the 
present invention. It is to be understood that the 
industry proposed DVD players do not include the slot 
to accept the authorization card (or in the alternative 
embodiment the magnetic head) and associated circuitry, 
and the addition of these elements is a required 
modification to DVD players in order to practice the 
present invention. 

Each DVD disc intended for rental also will 
contain a number of extra bytes of information 
optically recorded during the conventional mastering of 
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the disc, as part of the disc initializing information. 
In conventional CDs for instance, and also in the 
proposed DVD discs, there is a scan region which is 
read by the player in the initialization cycle of the 
5 disc. The initialization information conventionally 
includes data such as running time, number of tracks, 
and perhaps location of particular portions of the 
recorded material. In accordance with the invention, 
each rental disc will include, in addition to the 
10 conventionally provided information in the 

initialization region, a number corresponding to, for 
instance, the particular title of the movie recorded in 
the optical portion of the disc (a movie or program 
identification) and additionally an instruction telling 
15 the player to read the magnetic track of that 

particular disc to obtain authorization to play the 
disc. Discs intended for the sell-through market, i.e. 
to be sold at retail to consumers, will not include 
such an instruction to seek author izatibn. To put this 
20 another way, discs intended for the sell-through market 
will include an instruction which does not require the 
player to read the authorization card for authorization 
to play the disc, but will authorize the player to play 
the disc without consulting the authorization card. 
25 The information recorded on the authorization card 

includes the movie identification (s) and the player 
identification of a particular player or players 
authorized to play that disc. This information on the 
authorization card is encrypted and recorded at the 
3 0 time of the rental transaction by the transaction 

tracking and reporting device (TTRD) , provided to each 
rental store in accordance with the present invention. 
"TTRD" is nomenclature used herein for convenience to 
refer to a device as described in detail below. it is 
35 to be understood that such a device need not 

necessarily be a stand-alone device but may for 
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instance be incorporated into other transaction 
reporting equipment already present in video rental 
stores, with appropriate features as described below. 
A conventional electronic clock in each TTRD 
5 records, for each rental transaction, the time and date 
of authorization and later records when the particular 
disc was returned to the rental store after the rental 
was completed. 

Each DVD player, which is otherwise conventional, 
10 also includes a decision circuit which allows that 

particular player to play a particular disc only if its 
player identification matches the authorized player 
identification read from the authorization card, and 
also if the movie identification optically read from 
15 the disc matches the movie identification read from the 
authorization card) . 

When a rental customer first becomes a customer at 
a particular rental outlet or rental chain, the 
customer provides the rental store employee with the 
player identification of the customer's own DVD player. 
This identification, along with e.g. the customer's 
name and/or telephone number, is entered into the TTRD 
via e.g. a standard keyboard interface or by a bar code 
reader. Thus for instance a particular customer can 
become a member, as now, jat any number of rental stores 
and thereafter need only provide conventional " 
information, i.e. name or telephone number or rental 
identification card, to rent a disc. 

When a particular disc is rented, it is inserted 
by the rental store employee into the TTRD which then 
optically reads from the disc the movie identification 
from the disc's initialization region and records it, 
along with the customer's player identification, on the 
authorization card. This operation is automatic and 
35 takes only a few seconds. 
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The authorization tard is supplied by the rental 
store at the time of each rental; one card may include 
information for several rented discs. The cards will 
cost about $1 each to manufacture, and are reusable. 
The authorization card approach is less convenient to 
the rental store and renter than is the magnetic track 
on the disc, since an extra physical item is involved. 
The card may be sized to fit inside the disc "jewel 
case" to minimize risk of loss. However, the 
authorization card approach is less expensive in terms 
of cost of manufacturing the players. The security "and 
functionality of the system are independent of the 
authorization media employed. 

After the customer has finished using the disc and 
15 returns it to the rental store, the rental store 

employee briefly inserts the disc in the TTRD which 
reads both the magnetic and optical data and records in 
the TTRD memory the data and time of the return. The 
TTRD then has a complete record of the transaction. 

This system provides the above described 
advantages, in terms of functionality, for transaction 
tracking information the electronic clock in the TTRD 
notes each disc's time and date of authorization and 
when it was returned to the rental store. Combined 
with the movie title and renter's player identification 
if desired, this is sufficient information to track 
rental activity. It is to be noted however that in 
certain embodiments of the invention the rental 
tracking features are not necessary and only the below- 
described security features are included. Thus in 
certain applications where the rights owner may for 
instance not require transaction information but merely 
wants security, the functionality of transaction 
tracking and the accompanying structures may be 
35 dispensed with. 
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One added advantage of the present system is that 
it prohibits a particular renter from lending his 
rented disc (or tape) to a friend or relative, since 
only the particular renter's DVD player has been 
authorized to play any particular disc. This feature 
may advantageously generate extra rental transactions. 
If a particular customer owns more than one DVD player, 
the system accommodates this by allowing the 
recordation of more than one player identification on 
the authorization card (or on the disc magnetic track) . 
The system prohibiting lending to a friend may then be 
circumvented by a customer listing his friend's player 
as his own. (This would of course be found out if the 
friend then were to rent a disc on his own from the 
15 same rental store or rental store chain.) 

A major advantage in accordance with the invention 
is that system security is maintained even though a 
hacker acquires complete knowledge of the security 
principles used and is also fully capable of probing 
20 the entire operational details of the authorization 

circuits in a particular DVD player. That is to say, 
the DVD player itself holds no secrets and yet the 
system is still secure. The security system has two 
aspects. The first is preventing illicit transactions. 
25 The second is restricting access to the transaction 
data in accordance with the transaction reporting 
system, of these, the first is probably more 
important. 

In order to prevent illicit transactions, that is 
to prevent a hacker from designing a "black box" device 
to illicitly record authorization data on an 
authorization card, this data (the player and movie 
identification) is concatenated and encrypted and 
written on the authorization card (or on each disc) by 
the TTRD, using a public key encryption system. Such 
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systems are well known. The following is a brief 
review of pertinent encryption methods. 

The most common form of data encryption and best 
known to the layman, is called private key or 
5 symmetrical encryption and is the method historically 
used for encryption, such methods use the same key to 
encrypt and to decrypt data. To guard against trial 
and error attempts at guessing the encryption key, the 
key is usually a large number, i.e. an 18 decimal digit 
10 number. The DES (data encryption system) algorithm is 
an example of a private key system in which data 
arranged in 64 bit blocks, are encrypted using a 56 bit 
key. (Fifty-six bits are equivalent to approximately 
17 decimal digits.) 

15 in private key encryption systems, as is well 

known, the chosen key must be kept secret from hackers 
(or any one with an adverse interest) to ensure 
security. However at the same time the key must be 

^ provided to a potentially large group of legitimate 

20 users. In a typical (military) context, there is a 

relatively small number of legitimate users and hence 
such systems have historically been used somewhat 
successfully. However, for the present purpose each 
DVD player must include the decryption key in order to 

25 read the authorization medium. Thus hackers, who can 
easily buy a DVD player, would have at least iff some 
form access to the key, hence substantially reducing 
system security. That is to say, it is unrealistic to 
believe that the decryption key used in such a player 

30 would be protected against the determined effort by a 
hacker to read it, given the low cost and ubiquity of 
the players. Therefore it is believed that a private 
key encryption system is more likely to be penetrated, 
but however may be used in accordance with the present 

35 invention where the above-described drawbacks may be of 
less importance . 
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The other type of data encryption uses a public 
key and is also referred to as asymmetrical encryption. 
Thus there are two different keys in such a system. 
The first is the private key, known only to authorized 
users as in the above described private key system; the 
second key is the public key which may be widely known 
without risk of system penetration, i.e. hacking. One 
key (either key) is used for data encryption and the 
other key is used for decryption. An essential feature 
of all public key systems is that knowledge of the 
decryption key does not allow the hacker to encrypt a 
message and vice-versa. 

The most secure public key system commercially 
available is from a company called RS A Data of Redwood 
15 City, CA. The security of this system is predicated on 
the difficulty of factoring very large numbers, 
containing upwards of one hundred decimal digits. The 
fastest known factoring algorithm running on the 
fastest computers typically takes decades to factor 
20 such numbers. The larger the key, the more difficult 

factoring becomes, in practice, the size of the key is 
chosen to reduce the cost effectiveness of a factoring 
effort to unacceptable levels for a would-be hacker, 
throughout the expected life of the product and with 
due allowances for anticipated increases in computing 
power. .... 

In accordance with one embodiment of the present 
invention, the private key of the public key system is 
used for encryption. Thus this key is securely stored 
in each TTRD in such a manner that any attempt to 
extract the private key from the TTRD causes erasure of 
the key. This is relatively easy to accomplish since 
there are limited number of TTRD devices (typically one 
per rental store) each of which is electronically 
polled from time to time for ordinary transaction 
purposes. Hence any breach of security is likely to be 
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easily detected. The technical means for protecting 
such keys embedded in an integrated circuit in the TTRD 
are well known. One simple method is that an attempt 
to open the TTRD housing results in immediately erasure 
of the private key. Similarly, since the key is likely 
to be embedded in a volatile memory, any attempt to 
electrically contact the leads of the memory results in 
erasure of its contents. Other types of security 
interlocks are well known, and multiple interlocks may 
be provided. Additionally of course, any successful 
attempt to obtain a data from a particular TTRD would 
point to the custodian of that TTRD as a likely 
conspirator. The mere existence of such knowledge 
would, it is believed, reduce penetration attempts. 

The corresponding public key needed for decryption 
of the DVD player is optically recorded on the disc 
along with the aforementioned movie identification and 
the authorization (rent/sell) instruction, as part of 
the ordinary optically recorded content of the disc. 
When the disc is to be played, this key is read by the 
DVD player and is used to decrypt the data on the 
authorization card, in order to enable playing. 

The public key is recorded optically on each disc 
rather than stored in each DVD player in order to 
permit quicker recovery from a security breach, in the 
unlikely event that the current private key bebame 
known, thereby threatening system security, a new pair 
of keys could quickly be generated. The new private 
key would be downloaded (i.e. via telecommunications) 
to each TTRD and the corresponding new public key would 
then be used on all new discs to be manufactured from 
that day on. Thus revenue losses would be restricted 
to video rental stores which obtained an illicit 
authorization device from a hacker, which now could be 
used only to authorize playing of movies released 
before the date of the key change. Furthermore, any 
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abnormal reduction in rental transaction reporting of 
particular movies released before the security breach 
occurred, from a particular rental store, would 
indicate that store was a possible illicit operator. 

In order to allow TTRDs to continue to authorize 
older movies after a new pair of keys is distributed, 
each TTRD would store the full history of keys used, ' 
organized by serial number, and automatically encrypt 
the data to be recorded on the authorization card with 
the appropriate private key. This is accomplished by 
appending- the key serial number to the public key 
recorded on the disc's optical track. The TTRD reads 
the serial number first and then selects the 
appropriate private key to perform the encryption from 
the set of private keys stored in the TTRD in its 
memory. 

The movie ID is both recorded optically on the 
disc and encrypted (along with the authorized player 
ID) on the authorization card for two reasons. The 
20 first reason is to permit TTRDs to track which 

particular movies are being rented. The second reason 
applies to system security; if data recorded on the 
authorization card were merely an encrypted instruction 
that would authorize any disc to be played by a DVD 
player having a particular identification, then that 
encrypted data stream could be obtained by a hacker and 
reused later. This would be done using a hacker's 
device to record the data stream on the authorization 
card. This would illicitly authorize playing of other 
movies by the same DVD player (that is, for the same 
customer) . 

A vital feature of a public key encryption system 
is that it is not possible to deduce what the encrypted 
data would be for a block of data which differs by as 
little as one bit from a block of data whose encrypted 
value is already known, in other words, knowing the 
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encrypted data for an instruction to allow e.g. movie • 
number 566 to play on a player with player ID 1289, 
would not allow a hacker to deduce what encrypted data 
would correspond to an instruction to allow movie 
5 number 567 to play on the identical player. Thus the 
most a hacker could do would be to note the code 
sequence which authorizes playing a particular movie 
for a particular player and later reuse that sane code 
sequence with the same customer desiring to rent the 
10 same movie at a later time. Thus at most such hacking 
would obtain for the unscrupulous rental store owner 
one additional rental without having to pay the rights 
owner for that one particular rental. The effort 
required to do this seems to vastly outweigh any likely 
financial gain and hence it would not be done. 

In terms of restricting access to transaction 
data, the system also uses in one embodiment a public 
key encryption system (not the same one as above in 
terms of the keys themselves) to report transactions. 
Thus each rights owner (e.g. movie studio) is assigned 
a unique private key/public key pair. Each TTRD stores 
the public key of each studio. Transaction data 
relating to a particular studio is encrypted within the 
TTRD prior to storage and transmission of same, using 
25 that studio's public key. Only the studio (or its 

agent) is provided with the corresponding private key 
needed to decrypt the transaction data. 

The rest of the system provides operational 
simplicity because at the time of rental, the video 
rental store employee must enter the renter's name or 
telephone number as is done conventionally using either 
a keyboard interface or a bar code scanner from an 
identification card including identification number, 
and then the employee additionally in accordance with 
the invention inserts the renter's authorization card 
and the particular rented disc in the TTRD. In the 
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first embodiment using the authorization card, the TTRD 
includes a plug in socket for electrically connecting 
to the authorization card. In the second embodiment 
using a magnetic track on the disc, the TTRD includes a 
special recording head to record on the special 
magnetic track on the disc (or tape cassette). 

The TTRD in either embodiment includes a port and 
loading mechanism such as those of a DVD player. The 
authorization card and the disc are ejected in a few 
seconds and the first part of the transaction is 
automatically recorded. When later on the renter 
returns the disc (or soon thereafter) the employee 
again inserts the disc in the TTRD and indicates the 
return transaction on its keyboard interface. The 
15 final part of the transaction, i.e. the time of disc 
return, is now recorded and the disc is again ejected 
and replaced on the store shelves; The authorization 
card is merely returned for later reuse. Transaction 
reporting to the rights owner or its agent is ^ done 
20 automatically, for instance via modem and telephone 

lines, at a convenient time. Transaction reporting may 
also be done by other well known means. Thus the 
effort required of the video rental store employee is 
only slightly greater than that required in existing 
25 rental stores using point of sale terminals to store 

customer information and bar code readers to -check out 
and check in video tape cassettes or discs. 

Additionally, customer convenience is provided in 
accordance with the invention. Additional effort 
30 required by the customer is that when he first signs on 
(becomes a member) at a particular rental store or 
rental store chain, the customer provides the store 
employee with his player identification (or 
identifications if he owns several players). Each DVD 
35 player thus for convenience would be sold along with 

several cards printed with the player identification in 
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type and e.g. bar code or a magnetic stripe. The 
player identification is also stamped on the rear panel 
of each DVD player along with the serial number. Thus 
the extra effort in providing one's player 
5 identification is a one-time effort accomplished when 
one first becomes a video rental store member. 

It is believed that the cost of implementing the 
present system is low. The cost of including in the 
alternative embodiment a magnetic read head and the 
10 associated authorization circuitry in each player is 
estimated, to be $i; the-^iost of this cost is the 
magnetic read head and its associated amplifier. Thus 
the cost is significantly less for the authorization 
card embodiment. The remainder of the needed circuitry 
15 is typically in the integrated circuitry already 

included in the player at only very slight additional 
cost. It is to be noted that much of the circuitry 
may, of being actual logic circuitry, instead be 
software in the microprocessor which operates the DVD 
20 player. 

It is estimated that for the alternative 
embodiment the cost of providing the circular magnetic 
track on mass produced discs is $.01 to $.05 per disc. 
This magnetic track would be narrow and need not be of 

25 high density, since the actual amount of data recorded 
on the track is small. - 

While the cost of each TTRD would be substantial 
only one such device need be provided per video rental 
store and these devices could be mass produced due to 

30 the large number of video rental stores. 

Figure 1 shows in a block diagram one embodiment 
of the TTRD which is located in the video rental store 
This device includes a conventional video disc optical 
reader 12 of the type conventionally found in disc 

>5 players and in this case typically of the type used in 
a DVD player. It is to be understood that the 
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references herein to DVD players are because it is 
anticipated that the present invention is most likely 
to be adapted in such a new video media standard. 
However, the present invention is compatible with other 
video disc and tape formats. (of course, present video 
disc and tape players do not include the circuitry 
needed to implement the present invention.) it is to 
be understood that the disc optical reader 12 includes 
conventional mechanical elements (not shown for 
simplicity) for spinning the disc 14. 

In the conventional operation of a DVD player, 
after insertion of the disc into the player, the player 
scans a region of the disc located near the center 
called the initialization region in order to obtain 
information about the contents of the disc recorded 
there which is typically presented on a display of the 
disc player. In accordance with the invention, this 
initialization region has recorded on it, in addition 
to the conventional information, the program (movie) 
identification, the rent/sale indication and the 
decryption key which includes conventionally the key 
serial number, the public key, and the key modulus. 
. Typically, the program identification need not be in 
alphanumeric form but may be merely a code number i.e., 
25 a 6 or 8 decimal digit code, it might be as few as 4 
decimal digits to uniquely identify for instance each 
movie released during a period of several years. 

The disc optical reader 12 reads from the 
optically recorded portion of the disc 14 via 
conventional laser reading mechanism 18 two pieces of 
data; these are (1) the key serial number, the public 
decryption key, and modulus and (2) a program 
identification number. This data is located as 
described above in the initialization region of the 
disc which already contains formatting information 
pertaining to the disc contents. 
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The disc optical reader 12 extracts this data from 
the stream of data read from the disc by laser reading 
mechanism 18. The key serial number is then (in one 
embodiment) provided to a key memory 22 which stores, 
5 in a secure fashion as described above, a list of 
private encryption keys for a public encryption key 
system. Thus the key number is in effect an address 
which indicates which particular key stored in key 
memory 22 is the one to be used as the private 
10 encryption key. This private encryption key is then 
provided to an encryptor 26 of a type commercially 
available from e.g. RSA Data as described above. 
Typically, this encryptor is actually a set of software 
routines (a computer program) to be executed 
conventionally by a microprocessor. The data encrypted 
by encryptor 26 is the program identification provided 
from disc optical reader 12 concatenated (in a block of 
data) with a particular player identification. This 
player identification is provided as described above 
from a memory 30 which is part of the TTRD, or entered 
for instance by keyboard or bar code reader at the time 
of the transaction. The player identification is that 
of the particular player belonging to the rental 
customer . 

The program identification in addition to being 
used for tracking also increases system security. That 
is, if there were no program identification, the only 
information recorded on the magnetic track of the disc 
would be the encrypted player number. Thus a hacker 
could breach the security of the system by reading the 
authorization card to obtain the code to authorize 
play, i.e. enable use of a particular player, by merely 
reading and recording the encrypted data pertaining to 
that player number. There is no need in this case for 
the hacker to decrypt this number but he merely needs 
to record the appropriate encrypted data on the 
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magnetic track of the disc without using the TTRD, i.e. 
bypassing the TTRD, and thus cheating the rights owner 
by not recording the particular rental transaction. 
Thus by providing a piece of information which is 
5 unique to each rental transaction (a program 

identification number) and given the use of a public 
key system, it is made impossible for a hacker to 
determine what the encoded data would be for a 
different movie for the same player, due to the nature 

10 of public key encryption systems. 

Thus it is to be understood that information other 
than the program identification could be used for this 
purpose. That is, when each particular optical disc is 
produced, instead of providing on the optical track a 

15 program (movie) code number, instead a random number is 
provided. Then the TTRD would read this random number, 
encrypt it and record the encrypted random number on 
the authorization medium. Thus the term "program 
identification" used herein does not refer necessarily 

20 to a number used universally for all discs carrying a 
particular movie, but instead to any number or 
information pertaining to a particular disc or video 
tape. Thus the program identification need not be 
unique to each movie; possibly a limited field with few 

25 as e.g., numbers 0 to 100 would be adequate to provide 
security, even though thus several movies might have 
identical program identifications. Thus for purposes 
of security alone, the program identification need not 
be a movie (title) identification. However, to 

30 maximize security, each movie should have a unique 
identification number. 

Encryptor 26 then encrypts this data and provides 
it to a data coder 34 which formats and codes the data 
into a particular conventional modulation scheme as 

35 desired. Authorization card 35 is connected to data 
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coder 34 by slot connector 33, to record the coded data 
on card 35. 

In the alternative embodiment, also shown for 
simplicity in Figure l, the coded data is then provided 
5 to a conventional amplifier 38 which drives a magnetic 
recording head 42 of the type commercially available. 
Head 42 then records the data on the magnetic track 
provided on disc 14. As described above, typically 
this magnetic track is near the hub of the disc but 
10 this location is not limiting, it is to be understood 
that typically both embodiments would not be used in 
any one TTRD. 

This being a rental type disc, prerecorded on the 
optical track is an instruction (perhaps only a single 
bit in a predetermined location) indicating that this 
is indeed a rental disc, in the absence of such 
instruction, this disc is understood by the player (as 
described below) to be a disc that has been sold to the 
user. If a "sell., disc is accidentally subject to the 
TTRD process as described above, this will have no 
effect on the use of the disc for reasons described 
below. 

After the encrypted program identification and 
player identification are recorded on the card 35, card 
35 and disc 14 are ejected from the TTRD and both given 
to the rental customer for his use. ... 

Also a part of the TTRD of Figure 1, but not 
needed for security reasons, is the tracking and 
reporting portion 52 including a data coder and 
formatter 46 which receive the program identification 
from the disc optical reader 12. Also provided via an 
electronic clock (not shown) is a date and time 
indication of the time of the rental transaction. 
These two items of data are conventionally coded and 
formatted into suitable form and provided to for 
instance a modem 50 which then transmits this 
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transaction data to a central tracking computer, for 
instance for each movie studio, via telephone lines. 
..It is to be understood that the tracking and recording 
portion 52 is not needed for security reasons but is 
provided for commercial reasons to allow each movie 
studio to determine the number of rentals of its films. 

In this system the particular player number is 
purposely not provided to the data coder and formatter 
46. Such could be done but it is not believed 
necessary for commercial tracking purposes. By not 
providing, such information, a greater degree of privacy 
is provided to the rental customer. 

It is to be understood that with minor 
modifications, the TTRD of Figure i is suitable for use 
with a video cassette tape, m this case, the laser 
system 18 is replaced with a VCR (magnetic) read head. 
Further details of the video cassette embodiment are 
provided below. 

While Figure 1 is a block diagram, each of the 
blocks represents a conventional commercially available 
element and moreover, the interconnections between the 
blocks are well within the skill of one of ordinary 
skill in the art. 

The rental customer then takes the rental disc 14 
and card 35 to his home and inserts both in his player 
which is shown in block form in Figure 2 . - - 

The player of Figure 2 includes several major 
elements common to all video disc players. These 
include a drive (not shown for simplicity) for the disc 
14, an optical read device which in this diagram is a 
laser system 60 (similar to element 18 of Figure 1) , 
and a disc optical reader 62 similar to optical reader 
12 which drives conventional player electronics 66. 
Thus elements 62 and 66 are conventional and of the 
type that would be provided in any video disc player, 
even one not in accordance with the present invention. 
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The data stream from laser system 60 is provided to the 
disc optical reader 62 which then provides demodulated 
and decoded data to the conventional player electronics 
66, Which is typically connected to a television set or 
5 monitor for viewing. 

The other elements shown in Figure 2 are added in 
accordance with the present invention to achieve the 
desired security, in the authorization card 
embodiment, these include a slot connector 73 which 
10 connects to authorization card 35. 

- In the alternative embodiment, also shown in 
Figure 2 for simplicity, these additional elements 
include a magnetic read head 70 having a structure 
similar to that of write head 42 in Figure l and being 
adapted for reading the magnetic track on disc 14. The 
signals from magnetic read head 70 are provided to a 
conventional analog amplifier 74. The performance of 
the magnetic read head 70 in the player need not be 
high; since the total amount of information recorded is 
approximately lOO bytes, the signal frequency is on the 
order of lo KHz and hence a low cost and simple 
magnetic read head and amplifier would be adequate. it 
is to be understood that typically both embodiments 
would not be present in any one player. 

The signals from amplifier 74 (or connector 73) 
are provided to a conventional data decoder 76--which is 
the complement of data coder 34 in Figure 1. The 
information recorded on the magnetic track on the disc 
in the alternative embodiment typically would be 
recorded using some form of modulation for the purpose 
of matching the recorded signal to the capabilities of 
the media. This modulation is typically called channel 
coding. Various methods of channel coding are well 
known. Thus in the player the magnetic reading 
circuitry includes data decoder 76 to decode 
(demodulate) this data in the alternative embodiment. 
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A typical method of coding suitable in accordance with 
the present invention would be frequency shift keying. 
Another suitable method is quadrature phased shift 
keying. Decoder 76 thus provides a conventional 
digital signal from the analog read signal from the 
head and amplifier. In the authorization card 
embodiment, decoder 76 would be a simpler digital 
circuit or. may even be dispensed with. 

The decoded data (in digital form) is provided to 
conventional error correction circuitry 78 to find and 
correct any errorsin the data. The corrected data is 
then provided to a decryptor 80 which is the 
complementary device to encryptor 26 of Figure 1. it 
is to be understood, however, that in the public 
15 key/private key system described above, the encryptor 
and decryptor are not simple complements of each other, 
in order to provide heightened security. The structure 
of decryptor 80 is that of the type commercially 
available from, for instance, RSA Data for their public 
20 key system. 

The demodulated and decoded data (but not 
encrypted) from the disc optical reader 62 is provided 
to a rental control circuit 84. The function of 
circuit 84 is to pick out the relevant data. This is 
relatively simple since the relevant data are known to 
be in particular locations of the initialization region 
of disc 14. The rental control circuit 84 selects 
three data items from the stream of demodulated and 
decoded data. The first item data is the program 
identification ("program ID"). The second is the 
decryption key (including the modulus). The third is 
the indication of authorization which provides an 
indication of the disc being a rental or sell disc. In 
this embodiment, the authorization indication is a 
35 single bit; if the value of the bit is 0, this is a 
rental disc, if the value is l, this is a disc for 
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sale. The authorization bit need not be encrypted. 
The key (including the modulus) (this is preferably the 
public key) is provided to decryptor 80 for purposes of 
decryption. The program identification is provided to 
a first comparator 90 as a first input thereof. The 
second input to comparator 90 is the decrypted program 
identification provided by decryptor 80 from the data 
read from the authorization medium. 

A second comparator 94 has as a first input the 
player identification from a read only memory (ROM) 98 
included in the player, providing a player 
identification number which may be for instance a 
number as small as two decimal digits but preferably 
would be somewhat higher. The second input to 
comparator 94 is the decrypted player identification 
from decryptor 80 from data on the authorization 
medium. The comparison function for comparing the 
program identification and player identification may be 
for instance logic circuit comparators comparing two 
sets of parallel bits. Alternatively, the comparison 
(and other functions described herein) may be carried 
out by equivalents such as a control program executed 
by the microprocessor typically present in disc 
players. m this case the microprocessor control 
program would take the two serial streams and perform a 
conventional bit-by-bit comparison. 

Each of comparators 90 and 94 provides, for 
instance, a high output if the comparison is a match 
i.e., the input data on the two inputs are identical. 
Similarly, each comparator 90 and 94 provides a low 
output signal if the inputs fail to match. 

The output signals of comparators 90 and 94 are 
then provided to an AND gate 102. Thus only if the 
output signals from both comparator 90 and comparator 
94 are high does AND gate 102 provide a high output 
signal. The output signal from AND gate 102 is the 
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first input to an OR gate 106. The second input to OR 
gate 106 is the authorization bit. Thus if this is a 
disc for sale, OR gate 106 receives a high input from 
the authorization bit. If the disc 14 is a rental 
5 disc, the authorization bit is p and the output of OR 
* gate 106 is controlled by the output of AND gate 102. 
OR gate 106 then provides a play enable signal to, for 
instance, player electronics 66 (or to any other 
operating portion of the player) to enable operation 

10 thereof. Thus only if the output signal from OR gate 
106 is high will the player be enabled for operation, 
i.e. playing of the program portion of the disc 14. 
This enablement function can take any one of a number 
of forms in terms of which portions of the player are 

15 enabled. 

Thus it is to be understood that for a rental 
disc, only if the program identification recorded on 
the authorization medium of the disc matches the 
program identification on the optical portion of the 
disc, and additionally only if the player 
identification of the player matches the player 
identification recorded on the authorization medium, is 
the player operative for playing the disc. Thus the 
play enable signal, which is the output signal from OR 
gate 106, is needed to enable reading of any portions 
of the disc other than the initialization region. 

Digital video disc players are sophisticated 
devices providing high speed digital signal processing 
i:e., have substantial embedded computing power. Thus 
it would be relatively inexpensive to include a small 
amount of additional program code to execute in 
software the functions illustrated in Figure 2 in the 
form of logic circuitry. Thus is to be understood that 
while Figure 2 shows a logic circuitry (hardware) 
35 embodiment, conversion of these functions to such a 

computer program is relatively simple and well within 
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the skill of one of ordinary skill in the art in the 
light of this disclosure. 

Figure 3 shows a top view of a video disc 14 in 
accordance with the alternative embodiment of the 
5 invention. The video disc 14 includes a central hub 
region 112 which is used conventionally for 
mechanically holding the disc when being played. The 
optically recorded portion of the disc is the entire 
outer region 114 which contains optical tracks (not 
10 shown for clarity) . The added element to such a disc 
in accordance with the present invention is the narrow 
magnetic track 118 which in this case immediately 
surrounds the hub region. Track lis has a magnetic 
coating similar to that for instance of magnetic tape 
or a floppy disc, for conventional magnetic recording 
and reading. Magnetic track 118 accommodates only 
approximately 100 bytes of data and hence may be 
recorded at low density. 

While the media referred to herein are digital 
video discs and video tapes, it is to be understood 
that this is not limiting, other types of media are 
suitable such as a magneto-optical disc. The chief 
requirement is that the medium used in accordance with 
the invention have at least a small area suitable for 
recording (and subsequent rerecording) thereon by the 
TTRD . 
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Figure 4 shows a VHS video tape cassette in 
accordance with a second version of the alternative 
embodiment of the present invention. This video 
cassette is conventional in all respects except that 
located on an exterior of the housing is a magnetic 
track 124. In this case, magnetic track 124 is shown 
on a side surface. However, it may also be on the 
other side surface or on the top or bottom surfaces. 
In any case, the magnetic track is on a surface which, 
when the cassette is inserted into a VCR, moves past a 
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magnetic read head located inside the vcR for purposes 
of reading the data recorded on the track 124. a 
similar magnetic head mechanism is used for writing the 
track 124 in the TTRD. Track 124 may be relatively 
short and record at a relatively low data density since 
It again only involves approximately 100 bytes of data. 

In this video cassette version, the information 
which in the video disc version is recorded on the 
optical portion of the disc is instead recorded on the 
video tape itself. This would be recorded e.g. on each 
frame or, perhaps alternate frame in a convenient 
location so that the player can easily find this 
information without having to hunt for any particular 
location on the tape. 

Also in the videotape cassette version there is a 
problem that the program content is of course readily 
altered by proper equipment. Thus it would be possible 
for a hacker to alter the rental control bit, i.e 
alter a rental control bit from indicating rental to 
indicating this particular video cassette is intended 
for sale (not for rent) . This is undesirable since it 
defeats the entire rental security system. To prevent 
this, the rental control bit, instead of standing 
alone, is the first bit in a block of data all of which 
IS encrypted using a private key and decryptable by use 
of a public key stored in the particular VCR player 
The rest of the data in the block is important picture 
or other data. This would prevent such alteration of 
the rental control bit. 

Another version of the present system for video 
cassette tapes does not require provision of a magnetic 
recording area on the cassette housing or sprocket 
ends. Instead, a predetermined portion of the video 
tape is used for recording the encrypted program 
Identification and player identification. This is less 
desirable since it would require rewinding of the tape 
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by the TTRD to find this particular predetermined area 
of the tape. 

m the event that this rental control system is 
adopted by the DVD standards setting bodies, an issue 
arises with respect to universal manufacturer 
compliance, since there is some added cost to each DVD 
player to implement this system, there is an incentive 
for any one particular manufacturer not to add the 
necessary circuitry and interface in order to gain a 
pricing advantage. The system as described herein does 
not require any special subsystem in a DVD player to 
allow rental discs (or tapes to play thereon. 

If universal compliance cannot for some reason be 
obtained through contractual arrangements between all 
manufacturers, a technical method in accordance with 
the invention will assure compliance by each 
manufacturer. One method, compatible with the system 
described herein, is to encrypt a small but important 
segment of the programmed data on each disc with a 
special movie-dependent encryption key into a range for 
the matching decryption key to be delivered to the 
player from the TTRD, via the authorization card. Any 
encryption decryption system may be used herein. 
Therefore in order to be able to play rental discs, 
non-compliant DVD players would need to contain all of 
the subsystems as described herein needed by <3omplying 
players and thus the owners of non-complying players 
would also have to have disc rental transactions 
processed by legitimate TTRDs. This should remove any 
incentives for manufacturers not to comply. 

In another version of the system with reduced 
security but enhanced "user friendliness," there is no 
player identification provided. That is, all players 
are identical (generic) so far as security is 
35 concerned. Instead each player includes an electronic 
clock or equivalent which tracks the time and date, for 
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instance to the nearest hour, over the life of the 
product. Thus when the renter rents a disc, the TTRD 
at the rental store writes on the authorization card 
the movie identification and a rental date window, for 
instance 4 8 hours or 72 hours from the time of the 
rental. 

Then when the renter takes the disc and the 
authorization card home and puts both into his player 
to play the disc, the control circuitry in the player 
compares the movie identification from the disc to that 
on the authorization card, and also compares the date 
window on the authorization card to the current date 
and time according to its internal clock. The disc 
will only then be played if the date matches the 
current data and time, and the player identification 
matches . 

It is to be understood that the security in this 
version is less than that in the above described 
embodiments, since a hacker would be able to deduce the 
date window in the encrypted form and provide such a 
date window together with the movie identification in 
encrypted form without use of the authorized 
(legitimate) TTRD and write both of these pieces of 
information on the authorization card. However such 
hacker-type authorization would only be good for the 
particular date window which the hacker had obtained in 
encrypted form, i.e. a specific 48 or 72 hours. 

This disclosure is illustrative and not limiting; 
further modifications will be apparent to one skilled 
in the art in the light of the present disclosure and 
are intended to fall within the scope of the appended 
claims. 
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What is claimed: 
1. 



A method for preventing playing of a 
prerecorded medium on an unauthorized player, the 
5 player including an authorization portion having a 
player identification stored therein, the method 
comprising the steps of: 

prerecording on the medium a program 
identification associated with contents of the 
^° medium; 

. prior to playing the prerecorded medium on a 
particular player, authenticating the program 
identification associated with the contents of the 
medium and the player identification of the 
15 particular player; 

providing an authorization player; and 
recording the authenticated program 
identification and player identification on the 
authorization medium, thereby preventing playing 
the medium without use of the authorization 
medium. 



2 



The method of Claim 1, wherein the step of 
authenticating includes encrypting by a private key of 
a public key encryption system; 

3. The method of Claim i, wherein the 
authorization medium is a memory card adapted for 
connection to a connection on the particular player. 

4. The method of Claim 1, wherein the medium is 
an optically recorded video disc, and wherein the 
authorization medium is a magnetic recording area 
located near a center of the disc. 
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5. The method of Claim 1, wherein the medium is. 
a video tape cassette, and the authorization medium is 
a magnetic recording area located on the video cassette 
housing. 

5 

6. The method of Claim l, wherein the step of 
recording includes magnetically recording, and wherein 
the authorization medium is a magnetic track on the 
medium and spaced apart from the prerecorded contents 

10 of the medium. 

7. The method of Claim 1, further comprising the 
step of transmitting the program identification, 
accompanied by a time indication, to a remote location. 



15 



8. The method of Claim i, further comprising, 
prior to the step of encrypting, reading the program 
identification from the medium. 

^° ^' method of Claim l, wherein the step of 

prerecording includes prerecording on the medium an 
authorization indication. 
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10. The method of Claim 9, wherein the 
authorization indication is concatenated with other 
data and encrypted. 

11. The method of Claim 1, wherein the step of 
prerecording includes prerecording on the medium a key 
encryption number for the step of encrypting. 

12. An apparatus for authorizing a prerecorded 
medium for play on an particular player, the player 
including an authorization portion having a player 
identification number stored therein, and the 
prerecorded medium having a contents portion including 
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prerecorded program material and including a program 
identification, the apparatus comprising: 

a medium reader portion capable of reading 
from the contents portion of the medium; 

an encryptor operative ly connected to the 
medium reader portion, thereby receiving the 
program identification; 

an input terminal for receiving a particular 
player identification, the input terminal also 
being operatively connected to the encryptor; 

_ a memory storing an encryption key, the 
memory being connected to the encryptor; and 

a writing circuit adapted for writing on an 
authorization medium, the writing circuit 
receiving from the encryptor the program 
identification and the player identification in 
encrypted form and writing both on the 
authorization medium. 

13. The apparatus of claim 12, wherein the memory 
stores a plurality of encryption keys, each being a 
private key of a public key encryption system. 

14. The apparatus of Claim 13. wherein each 
encryption key has a unique address in the memory, and 
further comprising means for receiving a memory address 
from the medium reader portion and selecting from the 
memory an encryption key corresponding to the received 
memory address. 

15. The apparatus of Claim 12, wherein the 
writing circuit writes to a memory card adapted for 
connection to the writing circuit. 

35 16. The apparatus of claim 12, wherein the medium 

reader portion is an optical video disc reader, and 
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Wherein the writing circuit records on an authorization 
area located near a center of the optical video disc. 

17. The apparatus of Claim 12, further comprising 
5 a transaction reporting portion connected to the medium 

reader portion, and receiving the program 
identification therefrom. 

18. The apparatus of Claim 16, wherein the 
10 writing circuit includes: 

.a coder portion connected to the encryptor; 
an amplifier connected to the coder portion; 



15 



and 



a magnetic recording head connected to the 
coder and positioned adjacent the authorization 
area of the medium. 



20 



15 



19. A method for authorizing playing of a 
prerecorded medium on a player, the prerecorded medium 
having a contents portion including prerecorded program 
contents, a program identification, and a decryption 
key, the method comprising the steps of: 

reading from the contents portion the program 
identification and the decryption key; 

reading from an authorization medium an 
encrypted program identification and player 
identif ication ; 

decrypting the program identification and the 
player identification read from the authorization 
'0 medium; 

comparing the decrypted program 
identification and player identification to 
respectively a player identification stored in the 
player and to the program identification read from 
5 the contents portion; and 

if both comparisons indicate a match. 
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enabling operation of the player to play the 
prerecorded medium. 

20. The method of Claim 19, wherein the 
5 decryption key is a public key of a public key 

encryption system. 

21. The method of Claim 19, wherein the 
authorization medium is a memory card adapted for 

10 connection to the player. 

22. The method of Claim 19, the contents portion 
of the prerecorded medium including an authorization 
indication, and further comprising the step of enabling 
operation of the player if the authorization indication 
so indicates. 
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23. The method of claim 19, wherein the 
authorization indication is encrypted together with 
other information, and further comprising the step of 
decrypting the authorization indication. 

24. The method of Claim 19, wherein the 
prerecorded medium is an optical video disc, and the 
step of reading from the authorization medium includes 
reading magnetically from an authorization area- near a 
center of the optical video disc. 

25. The method of Claim 19, wherein the 
prerecorded medium is a video tape cassette, and the 
step of reading from the authorization medium includes 
reading from an authorization area on the tape cassette 
housing as the cassette is inserted into the player. 

26. A player for playing recorded media, each 
medium having a content portion including prerecorded 
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program contents, a program identification, and a 
decryption key, the player comprising: 

a prerecorded medium reader portion; 
a control portion connected to the medium 
reader to receive therefrom the decryption key and 
the program identification; 

a reading circuit adapted for reading from an 
authorization medivim; 

a decryptor connected to the reading circuit 
and to the control portion, providing a program 
identification and a player identification read 
from the authorization medium in decrypted form to 
the control portion; 

a first comparator connected to the decryptor 
and to the control portion, thereby comparing the 
decrypted program identification to the program 
identification from the content portion of the 
medium; 

a memory storing the player identification; 

a second comparator connected to the 
decryptor and to the memory, thereby comparing the 
decrypted player identification to the player 
identification stored in the memory; and 

logic connected to the first and second 
comparators, providing a signal enabling playing 
of the program contents of the medium if both 
comparators indicate a match. 



27. The player of Claim 26, wherein the 
decryption key is a public key of a public key 
encryption system. 

28, The player of Claim 26, wherein the contents 
portion of the prerecorded medium includes an 
authorization indication, and wherein the control 
portion includes an enablement element providing a 
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signal enabling playing of the program contents of the 
prerecorded medium in response to the authorization 
indication. 

5 29. The player of Claim 28, wherein the 

authorization indication is also encrypted, and further 
comprising, in the control circuit, means for 
decrypting the authorization indication. 

^° 30. The player of Claim 26, wherein the 

authorization medium is a memory card, and the reading 
circuit is adapted for connection to the memory card. 
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31. The player of Claim 26, wherein the 
prerecorded medium is an optical video disc, and the 
reading circuit includes a magnetic head positioned 
adjacent a center of the video disc when the video disc 
is in the player, the authorization medium being at the 
center of the video disc. 

32. The player of Claim 26, wherein the 
prerecorded medium is a video tape cassette and the 
authorization medium is on an outside sxirface of the 
video tape cassette, and wherein the reading circuit 
includes a magnetic reading head positioned to read the 
authorization medium as the video tape cassette is 
inserted into the player. 

33. The player of Claim 26, the reading circuit 
30 including: 

a magnetic head; 

an amplifier connected to the magnetic head; 
a data decoder connected to the amplifier; 

and 

an error correction portion connected to the 
data decoder.' 
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34, A method for authorizing playing of a 
prerecorded medium on a player, the prerecorded medium 
having a contents portion including prerecording 
program contents, a program identification and a 

5 decryption key, the method comprising the steps of: 

reading from the contents portion the program 
identification and the decryption key; 

reading from an authorization medium an 
encrypted program identification and time window; 

decrypting, using the decryption key, the 
program identification and the time window from 
the authorization medium; 

comparing the decrypted program 
identification and time window to respectively the 
15 program identification read from the contents 

portion and a time kept by the player; and 

if both comparisons indicate a match, 
enabling operation of the player to play the 
prerecorded medium. 

20 

35. A player for playing recorded media, each 
medium having recorded thereon program identification 

. in encrypted form, a content portion including 
precorded program contents, and a decryption key, the 
25 player comprising: 

a prerecorded medium reader portion^- - 
a control portion connected to the medium 
reader to receive therefrom the decryption key and 
the program identification; 

a reading circuit adapted for reading an 
authorization medium having the program 
identification and a time window written thereon 
in encrypted form; 

a decryptor connected to the reading circuit 
and to the control portion, providing the program 
identification and time window in decrypted form; 
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a first comparator connected to the decryptor 
and to the control portion, thereby comparing the 
decrypted program identification to the program 
identification from the content portion; 

a clock; 

a second comparator connected to the 
decryptor and to the clock, thereby comparing the 
decrypted time window to a time indicated by the 
clock; and 

logic connected to the first and second 
comparators, providing a signal enabling playing 
of the program contents of the prerecorded medium 
if both comparators indicate a match. 

36, A video disc, comprising: 

an optically recorded content portion 
including prerecorded video material and an 
initialization region, the initialization region 
including a data decryption key, a program 
identification identifying the prerecorded video 
material, and a play authorization indication; and 

a magnetic track, the magnetic track being at 
a predetermined location on the disc relative to 
the optically recorded content portion, the 
magnetic track including sufficient area to record 
the program identification and a player -number . 

37. A video tape cassette, comprising: 
a cassette housing; 

a length of video tape mounted on two 
spindles inside the housing; wherein recorded on 
the tape, in addition to prerecorded video 
material, are a data decryption key and a program 
identification of the prerecorded video material; 
and 

fixed oh one of two locations, selected from 
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a group consisting of an exterior of the housing 
and an end of one of the spindles, is a magnetic 
recording track of a length sufficient to record 
the program identification and a player 
5 identification. 



-43- 



BNSOOCID: <W0 9635987A1J_> 



wo 96/35987 



PCTADS96/083S4 



1/4 



1 Meh,o,^ — ii 



1 




ENSDOCID: <WO 96359e7Al 



wo 96/35987 



2/4 



PCr/US96/08354 




BNSDOCID: <WO 9635987A1 J_> 



SUBSTITUTE SHEET (RULE 26) 



wo 96/35987 



3/4 



PCT/US96/08354 




BNSDOCID: <W0 9635987A1_L> 



SUBSTITUTE SHEET(RULE 26) 



wo 96/35987 



PCT/US96/08354 




INTERNATIONAL SEARCH REPORT 



Ini ational application No. 
PCT/US96/08354 



I A. CLASSinCATION OF SUBJECT MATTER 
IPC(6) :Plcasc See Extra Sheet. 
US CL :PIeasc Sec Extra Sheet. 
I According to intemational Patent ClassificaUon (IPC) or to both nation al classificaUon and IPC 

I B. FIELDS SEARCHED ~ ^ ~~ " 

I Minimum documentation searched (classification system followed by classification symbols) 

U.S. : 380/3, 4, 5, 23. 25; 360/33.1, 60. 132, 133. 134. 135; 369/48. 58 , 59; 358/310, 335; 340/825.31, 825J4 

I Documentation searched other than minimum documentation to the extent that such documents are included in the fields searched 



Electronic data base consulted during the intemational search (name of data base and. where practicable, search terms used) 



C. DOCUMEliJTS CONSIDERED TO BE RELEVANT 



1 Categoiy* 


Citation of document, with indication, vihm appropriate, of the relevant passages 


Relevant to claim No. 


X 


US, A, 4,866,769 (KARP) 12 September 1989, the whole 
document. 


1, 8, 9, 11 


Y 




2-7, 10, 12- 






18,19-25, 26- 


A 




33, 36, 37 

34, 35 


Y 
A 


US, A. 4,453,073 (WEINSTEIN) 05 June 1984, the whole 
document. 


10, 12-18, 19- 
25, 26-33 

34, 35 


Y. P 


US, A, 5,450.489 (OSTROVER ET AL.) 1 2 September 1995, 
the Abstract. 


2 



I fx] Further documents are listed in the continuation of Box C. Q See patent family 



annex. 



•L- 



speck! cotegorics of cttal documents: 

documcBtdefmiss (be gaml stele of die krt which m not cooMdend 
to be of panicukr mtevanoe 

eaxiier documatt publiafaed on or aAcr the intenuliottil filmg date 

document whicfa amy throw doubts on prioriiy cbun(s) or which m 
ched to estabtiiii the publicuion date of toother dioiioo or other 
1 (u Bpeciriod) 



document rcfenring to u oni disclosure, use, exhibition or other 



Istix document published After the miematioQsl filing dale or pr^^ 
date ud not m cockfiict with the applicatioQ but cited to undcntaod the 
pmcipk or thcoiy uodcrtyinc ^ invcmioa 

donrmmt of particular rekevaoce; the claimed 
ooosidered novel or cannotbc oooakleradto invoWe 
wbca the document it cakca atooe 

d onnnml of particular relcvaooc; the claimed invention ^"»«t be 
ooosiderod to mvotve an inventive step whcs the document is 
ccMnbinod with one or more other such documcnu. such combination 
beinc obviouito a person akilled in the art 



Date of the actual completion of the international search 
22 AUGUST 1996 


Date of mailing of the international search report 

04 0CT1996 


1 Name and mailing address of the ISA/US 
1 Commissioner of Pateiua and Trademarks 
Box PCT 

Washington, D.C. 20231 
1 Facsimile No. (703) 305-3230 


Authorized officer / / 

A HRAYR A. SAYADLAN /" / 
iTelephonc No. (703) 306^169 



BNSDOCID: <WO 963S987Al_l_> 



INTERNATIONAL SEARCH REPORT 



InU ^onal application No. 
PCTAJS96/08354 . 



C (Continuation). DOCUMENTS CONSIDERED TO BE RELEVANT 



Category' 



Citation of document, with indication, where appropriate, of the relevant passages 



Relevant to claim No. 



Y 
Y 



US, A, 5,267,311 (BAKHOUM) 30 November 1993, Fig. 1(b) 
Element #110 and the Figs, accompanying text. 

US, A, 5,379,433 (YAMAGISHI) 03 January 1995, the whole 
document. 

US, A, 5,400,319 (FTTE ET AL.) 21 March 1995, the whole 
document, as well as line 61 of column 16 to line 5 of column 17. 

US, A, 4,991,208 (WALKER ET AL.) 05 February 1991, the 
whdle document, see also lines 17-22 of column 2. 

EP, A, 0,393,955 (SONY) 24 October 1990, the whole document 

WO, A, 89/10615 (BRITISH BROADCASTING 
CORPORATION) 02 November 1989, the whole document. 

US, A, 5,400,403 (FAHN ET AL.) 21 March 1995, the whole 
document. 



3, 21, 30 



4, 6, 16, 18, 24, 
31, 36 

4, 6, 16, 18, 24, 
31 

5, 25, 32, 33, 37 



5, 25, 32, 33, 37 
5, 25, 32, 33, 37 



Form PCT/ISA/210 (continuation of second sheet)(July 1992)* 



: ■cWO 9635987A1J_> 



INTERNATIONAL SEARCH REPORT 



Inti ...ational application No. 
PCT/US96/08354 



Box I Observations where certain claims were found unsearchable (Continuation of item 1 of first sheet) 



This international report has not been established in respect of certain claims under Article I7(2)(a) for the following i 



□ 



Claims Nos.: 

because they relate to subject mailer not required to be searched by this Authority, namely: 



2. 



□ 



Claims Nos.: 

bccauscthcy relate to parts of the international appUcaUon that do not comply with the prescribed requirements to such 
an extent that no meaningful international search can be carried out, specifically: 



3. Claims Nos.: 

because they are dependent claims and are not drafted in acconlanccw^ ^ ^^^ 



Box II Observations where unity of inTention is lacking (Continuation of item 2 of first sheet) 



This hitemational Searching Authority found multiple invenibns in this international appUcalion, as foUows: 
Please See Extra Sheet. 



1* [x] As aU required addiUonal search fees were timely paid by the appUcant, this intenmUonalsM 



claims 



report covers all searchable 



2. □ As aU searchable ckims could be searched without effort justifying an additional fee, this Authority did not invite payment 
of any additional fee. 



3. Q AsonlysomeoftherequiredadditionalsearchfecsweretimelypaidbylheappUcan^ 
only those clauns for which fees were paid, specifically claims Nos.: 



4. □ No. required additional sean;h fees were timely paid by the applicant. ConsequcnUy, this inlematiomil search report is 
restricted to the mveation first mentioned in the claims; it is covered by claims Nos.: 



Remark on Protest 



I I Tbc additional search fees were accompanied by the applicant's protest. 
No protest accompanied the payment of additional search fees. 



Form PCT/ISAy210 (continuation of first shcct(l)){July 1992)* 



BNSEXJCID: <WO 9635987A1_L> 



INTERNATIONAL SEARCH REPORT 



Iniwiiaiional application No. 
PCT/US96/08354 



A, CLASSmCATION OF SUBJECT MATTER; 
IPC (6): 

C06F 7/04; G07D 7/00; GllB 5/78, 5/82, 3/90, 5/09. 15/04, 15/52, 19/04. 20/12, 23/02. 23/03, 23/28 27/22 27/36- 
H04K 1/00; H04L 9/00; H04N 9/79, 5/76, 5/78, 7/167 

A. CLASSIFICATION OF SUBJECT MATTER: 
USCL : 

380/3, 4, 5, 23 , 25; 360/33.1, 60, 132, 133, 134, 135; 369/48. 58, 59; 358/310, 335; 340/825.31, 825.34 

BOX U. OBSERVATIONS WHERE UNITY OF INVENTION WAS LACKING 
This ISA found multiple inventions as follows: 

This applicaUon contains claims directed to more than one species of the generic invention. These species are deemed 
to lack Unity of InvcnUon because they are not so linked as to fomi a single inventive concept under PCT Rule 13 1 

in oricr for more than one species to be examined, the appropriate additional exam^ The ' 

species are as fdlJows: ~ 

Group l:Claims 1-18, directed to Fig. 1, 
Group Il:Ciaims 19-33, directed to Fig. 2. 

Group in:Claims 34 and 35, detailed specification does not seem to describe these ehiims. These claims however 
address subject matter that arc mutuaUy exclusive from claims 19-33. 
Group IV:Claim 36, directed to Fig, 3. 
Group V.CIaim 37, directed to Fig. 4. 

The species listed above do not relate to a singk inventive concept under PCT Rule 13.1 because, under PCT Rule 
13.2. the species lack the same or conesponding special technical features for the following reasons: Group I is a 
process or devK^e for making Group U is a process or device for using. Group UI is a process or device for using that 
uses subject matter exclusively different than Group II, Group IV is a specific device that is different than the 
mvcnuons of Groups I-in. and Group V is a specific device that is different than the invention of Groups I-IV 



Form PCT/ISA/210 (extra sheet)(July 1992)* 



BNSDOCID: <WO 9635987A1 I > 



' ■ \ ■ 



This Page Blank (uspto) 



